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Abstract 

Unitary operations are expressed in the quantum circuit model as a 
finite sequence of elementary gates, such as controUed-not gates and 
single qubit gates. We prove that the simplified Toffoli gate by Margo- 
lus, which coincides with the Toffoli gate up to a single change of sign, 
cannot be realized with less than three controUed-not gates. If the 
circuit is implemented with three controUed-not gates, then at least 
four additional single qubit gates are necessary. This proves that the 
implementation suggested by Margolus is optimal. 



1 Introduction 

The simplified Toffoli gate realizes the unitary map M: — > given by 

|oo)®|0) ^ |oo)® !</.), 

|oi)®|0) ^ |oi)® !</.), 

|io)®|</.) ^ \w)^z\^), 

111)0 10) ^ |ii)0X|0), 

where \4>) is an arbitrary state in C"^, X denotes the not gate, and Z a phase 
gate, 

The unitary map M coincides with the Toffoli gate p. on all vectors of the 
standard basis, except that it maps the state |101) to — 1101) instead of 
1 101); this strong resemblance explains the name. 

* Guang Song's current address is: Baker Center for Bioinformatics and Biological 
Statistics, Iowa State University, Ames, lA 50011-3020, USA. Email: gsong@iastate.edu. 
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The simplified Toffoli gate has an elegant implementation ,1', which is 
due to Margolus , see also • It merely requires three controlled-not 
gates and four single qubit gates: 
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The congruence sign indicates equivalence up to a multiplication with a 
diagonal matrix of phase factors. There are some alternatives to M that 
differ in some other basis state by a sign, but that is not an essential change. 

The simplified Toffoli gate cannot substitute for the Toffoli gate in gen- 
eral, because phase factors are important in true quantum algorithms. How- 
ever, if the Toffoli gates appear in pairs, then it is possible to adapt the 
circuit structure to take advantage of the simplified Toffoli gate 0. The 
saving are quite substantial in this case, because the best implementations 
of the Toffoli gate known to date need fourteen controlled-not and single 
qubit gates. 

Our main result expresses our appreciation of the beautiful structure of 
the quantum circuit . We prove that the circuit is optimal in the following 
sense: 

Theorem M Suppose that the simplified Toffoli gate M is realized by a 
sequence of controlled-not and single qubit gates. Any such sequence contains 
at least three controlled-not gates. If it contains three controlled-not gates, 
then at least four single qubit gates are needed. 

Our proof reveals that the elegant structure of the circuit ^ is not 
an arbitrary artifact. Indeed, any optimal quantum circuit realizing M 
is essentially of this form, except that the single qubit gates are possibly 
different. 

We followed the seminal paper in our choice of the universal set of 
gates, because this has been adopted in several textbooks as well. Choosing 
controlled-not gates and single qubit gates is somewhat arbitrary, but similar 
arguments can be carried out for other universal sets of quantum gates. The 
main reason for our choice is that the number of controlled-not and single 
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qubit gates constitute the prevailing measure of complexity currently used 
in Computer Science. This paper is part of a larger program, where we try 
to gain a better understanding of basic quantum circuit structures. 

Notations. In addition to the gates introduced in and we use 

to denote the Hadamard gate. The state |0a;) = H\0) denotes the eigen- 
state of X with eigenvalue +1. The most significant qubit is represented by 
the topmost wire in the quantum circuit notation, and the least significant 
qubit by the lowest wire. We denote by C the field of complex numbers, 
and by R the field of real numbers. 

2 Review of Previous Work 

We review in this section some useful lemmas, all of which are proved in [S]. 
We will use these results in the proof of Theorem M. Recall that it is pos- 
sible to switch the control and the target qubit of a controlled-not gate by 
conjugation with Hadamard matrices H: 
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Due to this important fact, it suffices to consider controlled-not gates where 
the control is on a higher significant qubit that the target qubit when we 
write down the general form of a circuit. 

Lemma 1 Let 1-0), 10) he nonzero elements ofC^. The input {ip) to 
a controlled-U gate will produce an entangled output state if and only if 
is not an eigenvector of U and {tp) = a\0) + b\l) with a,b ^0. 

Lemma 2 Assume that |0) is an eigenvector of a unitary 2x2 matrix U 
with eigenvalue A^. Let \ip) denote a state in C^. If we input \tp) \cj)) to 
the controlled-U gate, then the output is of the form diag(l, A^)!"!/^) ® \(j)). In 
particular, the output is not entangled. 
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A controlled-C/ gate can be realized with two controlled-not gates and 
several single qubit gates, as follows: 
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A, 



A, 



Bo 



A. 



B^ 



(5) 

The following two lemmas describe some constraints on the gates Ai,A2, 
and A3. We call a single qubit gate sparse if it is realized by a diagonal or 
antidiagonal 2x2 matrix. 

Lemma 3 // the matrix A\ is sparse, then A2 , A^ are sparse as well. 



Lemma 4 Suppose that U is not a multiple of the identity matrix. If A\ in 
the circuit \^ is not sparse, then ^2)^3 are not sparse either. 



3 Proof of Theorem M 



We proceed to show that three controlled-not gates are necessary and suf- 
ficient in any realization of unitary map M by a sequence of controlled-not 
and single qubit gates. We first prove that at least two controlled-not oper- 
ations act on the last qubit: 

Lemma 5 Suppose there are some interactions between the top two qubits, 
but only one controlled-not interaction between the two control qubits and 
the target bit. The circuit cannot realize the Margolus map M . 

Proof. Any such circuit can be represented in the form 
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Let |0x) = "^(lO) + s-i^cl denote by an arbitrary state in C^. If we 

input \^p) eg) C||Oa;) to the above quantum circuit, then the least significant 
qubit of the output state is not entangled with the remaining two qubits, 
regardless of the nature of input state | if) . 

However, if we choose the input |00) ®\(fi) + |10) ® \(fi) -\- ® , then 
the output of M is |00) ® \(t)) + |10) ® Z\4>) + |11) X\(p). Note that the 



4 



target qubit is entangled with the other two qubits, since cannot be an 
eigenvector of X and Z at the same time. Contradiction. □ 

Corollary 6 The target qubit is affected by at least two controlled-not op- 
erations. 



Two Controlled-Not Gates. Assume there are only two controlled-not 
gates in the circuit. Taking Corollary Inland the identity (0J) into account, we 
may assume that both controlled-not gates operate on the target bit. The 
control qubits of the two gates have to be different, for otherwise it would 
not be possible to entangle all input qubits with the outout qubit. 

Since M = M\ we do not need to concern ourselves with the order the 
two controlled-not gate in such a circuit. Therefore, we may assume that 
the circuit is of the form 



Si 



A, 



B2 



Co 



(7) 



Lemma 7 The circuit ^ cannot implement the simplified Toffoli gat 



e. 



Proof. When the top qubit is |0), then the circuit ((T)) can still entangle the 
least significant two qubits, contradicting the behavior of M. □. 



Corollary 8 At least three controlled-not gates are necessary in an imple- 
mentation of the simplified Toffoli gate M by a sequence of controlled-not 
and single qubit gates. 



Three Controlled-Not Gates. The remaining argument proceeds by 
considering all possible configurations of the three controlled-not gates. Ini- 
tially, we allow an arbitrary number of single qubit operations. Thus, we 
may assume that the target qubit has lesser significance than the control 
qubit by applying (^J, so that we have to consider (2) = 27 configurations 
of controlled-not gates. We use the pictogram 
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as a shorthand for a general quantum circuit of the form (jH)) that contains 
in addition to the specified controhed-not configuration ah potential single 
qubit gates. We distinguish three different cases that we record here for the 
orientation of the reader: 



Case 1 



Case 2 
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Case 3 



The remaining configurations 
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are excluded because they are ruled out by Corollary IHl or lack the capability 
to entangle all three qubits, hence cannot implement M. 

It turns out that only a single configuration allows to realize the simpli- 
fied Toffoli gate M. In most cases, we are able to exclude circuit structures 
because they exhibit entanglement properties that are inconsistent with the 
behavior of the simplified Toffoli gate M. We record the following trivial 
observation: 

Lemma 9 Suppose that two systems A and B of qubits are entangled. If 
the remaining gate operations affect the systems A and B separately, then 
A and B remain entangled. 

Proof. Seeking a contradiction, we assume that the resulting output state is 
not entangled, i.e., is of the form \(I)a) (g) The gate operations leading 

to this output state can be written in the form Ua ® Ub, since the opera- 
tions affect the systems separately. This would imply that the input state 



tion. □ 



Ub\<Pb) was separable as well, in contradiction to the assump- 



Case 1. The circuits configuration are in this case characterized by the fact 
that exactly two controlled-not gates act on the target qubit of M, and they 
are controlled from different qubits. The third controlled-not gate is between 
the two most significant qubits. It turns out that none of these circuits can 
implement M, even if we allow single qubit gates on all possible positions. 



Lemma 10 A circuit with one of the configurations 



cannot implement the simplified Toffoli gate M . 



Proof. The most general circuit corresponding to the first pictogram is given 
by 



A, 



Ci 



Bo 
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B^ 



Co 
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(8) 

Seeking a contradiction, we assume that Ai is not sparse. If we provide an 
input |0) (8) I (/)) C| I Oj;), then the top two quantum bits could possibly get 
entangled by Lemma ^ and if so, these two qubits would remain entangled 
by Lemma El contradicting the behavior of M. Hence, Ai must be sparse. 

By the same token, A2 has to be sparse, because otherwise we can find 
an input state of the form |0) I99), such that the most and least significant 
qubit get entangled, contradicting the behavior of M. As a consequence, A3 
is sparse as well. 

Therefore, the behavior of the circuit Q on input of |0) |(/?), \ip) G C^, 
can be simulated by a circuit of the form 
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(9) 

where the values oi k,l £ {0, 1} depend on whether Ai and A2 are diagonal 
or antidiagonal. It is obvious from this circuit that we can choose a separable 
state \ip) such that the two least significant qubits get entangled, even though 
the topmost qubit is in the state |0). This contradicts the behavior of M, 
thus a circuit of the form (jSJ cannot realize M. 

In the same way, it is straightforward to see that neither the second nor 
the third pictogram can realize M. 

Finally, the last three pictograms represent the inverse circuits of the 
first three, so none of them can realize M since M is self-inverse. □ 

Case 2. The circuit configurations of the second case are characterized by 
the fact that exactly two controlled- not gates act on the target qubit, and 
both are controlled from the same qubit. We distinguish in our discussion 
whether they are controlled by the middle qubit {Case 2.1), or by the most 
significant qubit {Case 2.2). 
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Case 2.1. This case treats the configurations of controlled- not gates that 
have the pictorial representation 



Lemma 11 A circuit with one of the controlled-not configurations 



cannot implement the simplified Toffoli gate M . 

Proof. The most general circuit corresponding to the first pictogram is given 

by 
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(10) 

The second pictogram is covered by taking the inverse of the above circuit, 
hence does not need to be treated separately. If we input |0) ® B\\i)) |0), 
then the circuit will produce an entangled output state by Lemmas ^ and 1^1 
if Ai is not sparse. Hence, Ai has to be sparse, and consequently A2 as well. 

If we take the input state |0) (8) \if), with \ip) S C^, then the circuit (jTUI) 
has to act identically on \(p). Consequently, we obtain the circuit identity 
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On the other hand, we can derive from the input |1) ® \ip) the circuit identity 
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(12) 



Combining the previous two circuit identities, we obtain 



BiXBl 



which is absurd. Therefore, a circuit of the form ()1U() cannot implement M. □ 
Lemma 12 A circuit with controUed-not configuration 



cannot implement the simplified Toffoli gate M . 

Proof. The most general circuit corresponding to the configuration depicted 
in the last pictogram is given by 
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Co 



Ba 



(13) 



Once again, we want to show that this circuit structure cannot implement M. 
We note that Ai and A2 have to be sparse (for otherwise it would be possible 
to find a state \ip) £ such that |0) (8) \(p) leads to an entangled output 
state, arguing as in the previous case). The circuit (fT^ has to act as the 
identity an input state |0) \ip). Thus, we obtain the circuit identity 
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Similarly, the input \l) ® 



leads to the circuit identity 
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(15) 



From circuits (|14|) and (|15|) . we have. 



B. 



B3XBI 



B] 



Y 



Z 



(16) 
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Moving Z to the left-hand side of the equation, we have 
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(17) 

Now for any input state {(p) {Ci)^Ox), such that = a\0) + b\l) is in 
superposition, a, 6 / 0, the circuit on the left hand side does not entangle 
the two qubits. Therefore, by Lemma ^ we know that (Ci)^|02:) has to be 
an eigenvector of Y. Furthermore, by Lemma [2 we have 



bIbIxB^Bi = diag{l,yo), 



(18) 



where yo is one the eigenvalues of Y, i.e., yo = (— i) or i. Taking the trace 
on both sides, we get a contradiction. □ 

Case 2.2. We now treat the configurations that have the pictorial represen- 
tation 



Changing the role of the two most significant qubits, we arrive at simplified 
Toffoli gate M' that is implemented by 



Y 



Thus, it is equivalent to use the circuits (fT(l|) and (|13j) of the previous case 
to implement M' . 

Lemma 13 Circuits with configuration 
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cannot realize the Toffoli gate M . 

Proof. We use the above trick and show that circuit H1U|) cannot imple- 
ment M' . We derive from the input state \Q) ®\'4)) the circuit identity 
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Similarly, the input state |1) \4>) yields 
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We can deduce from circuits (|19j) and (|2fl|) the relation 
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which clearly leads to a contradiction. □ 
Lemma 14 Circuits with configuration 



(20) 



(211 



cannot realize the Toffoli gate M . 

Proof. It suffices to show that circuit ()13() cannot implement M' . Consider- 
ing the input state |0) (8) |(/)) IV'), we obtain the circuit identity 
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And with input |1) 



we get 
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Combining circuits (|22|) and (|23|) . we have, 
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(23) 



(24) 

Similar to the proof for circuit H17|) . we again arrive at a contradiction after 
considering the trace. □ 

Case 3. We now examine five of the remaining six configurations. 
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Lemma 15 Circuit configurations of the form 



«- -SB-® 
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cannot implement the simplified Toffoli gate M . 

Proof. The most general circuit corresponding to the first configuration in 
the statement of the lemma is of the form 
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(25) 

Following the same steps as in the proofs of Lemmas 1111 and [T^ it is straight- 
forward to see that such a circuit cannot realize M nor M' . Therefore, the 
first and the third configuration can be ruled out. The other two configura- 
tions can be ruled out by realizing that M is self-inverse. □ 

Lemma 16 The circuit configuration 
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cannot implement the simplified Toffoli gate M . 
Proof. It suffices to prove that the circuit 
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(26) 



cannot realize M' . As in Lemma ITTI we note that both Ai and A2 have to 
be sparse. Considering input states of the form |0) \4>) ® IV'), it follows 
from circuit (|26|) that the circuit identity 
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must hold. We derive from the action on the input |1) 10) jV') the circuit 
identity 
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Combining circuits (|27|) and H28|) . we have, 
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The right hand side of H29() cannot produce entangled output states when 
provided with the input states -B||0) (E) \<p) and i?J|l) |(^). It follows that 
either 

(30) 



clclxc2Ci = I 



or 



c]xclxCoXC, = I 



^^^i.^2^'-^2^^1 — (31) 

holds. Taking the trace on both side, we arrive at a contradiction in either 
case. □ 

Final Step. We have now excluded 26 of the 27 possible control-not config- 
urations. We know that the only viable configuration 



actually allows to realize the simplified Toffoli gate AI. The general circuit 
associated with the circuit configuration is of the form (j2| 



Lemma 17 At least four single qubit gates are necessary in any realization 
of the simplified Toffoli gate M with three controlled-not gates. 

Proof. The only viable general circuit structure with three controlled-not 
gate is given by the circuit (|2()jl . We will show that at least four single qubit 
gates in this circuit differ from multiples of the identity, and that the gate 
count cannot be reduced by flipping the gates using (jlj. 

A circuit H26() realizing M is supposed to leave an input state of the form 
|0) (8) \<f) invariant. This implies the circuit identity 
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And we obtain from the action on |1) l^p) the identity 
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Combining circuits and we obtain the equaUty 
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It follows from Lemma@]that Bi has to be sparse. By LemmaOl this implies 
that the gates B2 and B^ in circuit H33|) have to be sparse as well. Since 
we know that Ai and A2 are sparse, flipping any number of controlled-not 
gates in circuit using equality @ cannot decrease the count of the 
single-qubit gates. It remains to show that none of the four gates Ci, . . . , C4 
in circuit (|26|) can be a multiple of the identity. 



Since Bi is sparse, let Bi 
state |0) (g) {(p) and |1) O 



diag(e*'^°, e*'^^)X'^. Considering the input 



, we can deduce from circuit (|34|) the equalities 



ClX'^ClXCiX'^Ci 

c\x^-^clxc2X^-^Ci 



X. 



(35) 
(36) 



If follows from equations (|35() and (jSHJ that neither Ci nor C2 can be a 
multiple of the identity. Since we can apply the same argument 

to the inverse of the circuit H26|) , hence neither C3 nor C4 is a multiple of the 
identity either. Therefore, at least four single qubit gates are non-trivial, as 
claimed. □ 



4 Conclusions 

We have demonstrated that the simplified Toffoli gate by Margolus cannot 
be realized with fewer than three controlled-not gates. Four additional sin- 
gle qubit gates are required when M is realized with minimal number of 
controlled-not gates. Our proof of this lower bound revealed the interest- 
ing fact that the solution by Margolus is essentially uniquely determined 
by these constraints. The tedium of cases in lower bound proofs can be 
daunting, but one usually gains valuable structural insights, particularly if 
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the bounds are tight. It would be interesting to know tight lower bounds 

for other fundamental constructions of quantum circuits, such as the Toffoli 
gate. It is conjectured that the Toffoli gate cannot be implemented with less 
than six controlled-not and eight single qubit gates. 
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